When testing a content filtering rule set to scan "Internal messages (store)" Symantec Mail Security for Microsoft Exchange (SMSMSE) does not take action as configured against the test attachment.
Conditions
When a content filtering rule is set to scan "Internal messages (store)" in SMSMSE, it uses Microsoft technology called Virus Scanning Application Programming Interface (VSAPI) to scan items in the message store. VSAPI passes items with blank attachments to SMSMSE as if the item did not contain an attachment.
When testing "Internal messages (store)" attachment blocking rules, use a legitimate file of the type specified in the rule, or alternatively include at least one character in the content of the test text file prior to renaming the test text file.